The Global Privacy Assembly (GPA) recognises the unprecedented challenges being faced to address the spread of Coronavirus (COVID-19).

Data protection authorities across the world stand ready to help facilitate swift and safe data sharing to fight COVID-19, while still providing the protections the public expects.

Below is the latest guidance and information from GPA members and observers on data protection and COVID-19. Further updates to follow.

Albania IDP
Guidelines on the protection of personal data in the context of the measures taken against COVID-19 [EN]
Andorra Data Protection Agency
Information on data protection and COVID-19 [CA]
Argentina Agencia de Acceso a la Información Pública
Protección de datos personales y geolocalización [ES]
Crisis sanitaria y protección de la privacidad [ES]
Tratamiento de datos personales ante el Coronavirus [ES]
Association Francophone des Autorités de Protection des Données Personnelles (AFAPDP) Déclaration de l’AFAPDP à propos de la protection des données à caractère personnel dans le contexte de la pandémie de COVID-19 [FR]
Australia

Office of the Australian Information Commissioner (OAIC)
Coronavirus (COVID-19): Understanding your privacy obligations to your staff – Agencies [EN]

Office of the Victorian Information Commissioner
Privacy and COVID-19 [EN]
How to respect privacy and protect public sector information when working remotely [EN]

Austria Austrian Data Protection Authority
Data Protection Authority Information on Coronavirus (Covid-19) [DE]
Bulgaria Commission for Personal Data Protection
КЗЛД въвежда противоепидемични мерки срещу разпространението на COVID-19 [BG]
Burkina Faso National Commission for Informatics and Liberties (Commission Nationale de l’Informatique et des Libertés)
Message de la CIL sur la pandémie de coronavirus (COVID-19) [FR]
Canada

Office of the Privacy Commissioner of Canada
Announcement: Commissioner issues guidance on privacy and the COVID-19 outbreak [EN][FR]
Guidance: Privacy and the COVID-19 outbreak [EN][FR]
A Framework for the Government of Canada to Assess Privacy-Impactful Initiatives in Response to COVID-19 [EN][FR]

Office of the Information and Privacy Commissioner of Alberta
Privacy in a Pandemic [EN]

Quebec: Information Access Commission (Commission d’accès à l’information)
Pandémie, vie privée et protection des renseignements personnels [FR]

Chile Chilean Transparency Council
¿Se puede revelar el nombre de una persona contagiada o de un eventual contagio? [ES]
Council of Europe (Observer) Joint Statement on the right to data protection in the context of the COVID-19 pandemic [EN][FR]
Joint Statement on Digital Contact Tracing [EN]
Czech Republic Office for Personal Data Protection
Ke zpracování osobních údajů v rámci opatření proti šíření koronaviru [CS]
European Data Protection Board (Observer) Statement of the EDPB Chair on the processing of personal data in the context of the COVID-19 outbreak [EN]
Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak [EN]
Twenty-third Plenary session: EDPB adopts further COVID-19 guidance [EN]
Guidelines 04/2020 on the use of location data and contact tracing tools in the context of the COVID-19 outbreak [EN]
European Data Protection Supervisor EU Digital Solidarity: a call for a pan-European approach against the pandemic by Wojciech Wiewiórowski [EN]
Finland Office of the Data Protection Ombudsman
Data protection and limiting the spread of coronavirus [EN]
France Commission Nationale de l’Informatique et des Libertés
Coronavirus (Covid-19) : les rappels de la CNIL sur la collecte de données personnelles [FR]
Georgia State Inspector’s Service
Statement of the State Inspector’s Service [EN]
Gibraltar Gibraltar Regulatory Authority
Data protection and Coronavirus: What you need to know [EN]
Germany

Office of the Federal Commissioner for Data Protection and Freedom of Information
DSK provides information on data protection and Coronavirus [DE]
German Data Protection Supervisory Authorities joint information paper on data protection and the Coronavirus pandemic [DE]

Mecklenburg–West Pomerania: Data Protection Commissioner (Landesbeauftragte für den Datenschutz Mecklenburg-Vorpommern)
Statement on Privacy and Coronavirus [DE]

Hong Kong Privacy Commissioner for Personal Data
The Use of Information on Social Media for Tracking Potential Carriers of COVID-19 [EN]
Response to media enquiry on privacy issues arising from COVID-19 [EN]
Privacy Commissioner Responds to Privacy Issues Arising from Mandatory Quarantine Measures and Provides Updates on Doxxing [EN]
Fight COVID-19 Pandemic Guidelines for Employers and Employees [EN]
Zoom Data Security Incident [EN]
PCPD Provides Guidelines on Children’s Privacy during the Pandemic [EN]
Hungary Hungarian National Authority for Data Protection and Freedom of Information
Information on processing data related to the Coronavirus epidemic [EN]
Ireland Data Protection Commission
Data Protection and COVID-19 [EN]
Protecting Personal Data When Working Remotely [EN]
COVID-19 and Subject Access Requests [EN]
Staying safe online during a pandemic [EN]
Data Protection Tips for Video-conferencing [EN]
Italy Data Protection Commission (Garante per la protezione dei dati personali)
Coronavirus and data protection [IT]
Excerpts from an interview of the President of the Italian SA, Antonello Soro, with the Italian daily “Corriere della Sera”, on data protection issues and COVID-19 measures [EN]
Israel Israeli Privacy Protection Authority
Guidelines on Privacy Aspects of the Coronavirus Epidemic (COVID-19) [EN]
Japan Personal Information Protection Commission
Handling of personal data for preventing the spread of Novel-Coronavirus (COVID-19) disease [EN]
PPC’s views on effective use of contact tracing app to help deal with Coronavirus disease (COVID-19) [EN]
Jersey Office of the Information Commissioner
Data Protection and Coronavirus [EN]
Liechtenstein Data Protection Authority
Datenschutz während der Corona-Krise [DE]
Lithuania State Data Protection Inspectorate
Personal Data Protection and Coronavirus COVID-19 [EN] [LT]
Luxembourg National Commission for Data Protection
Coronavirus (COVID-19): recommendations by the CNPD on the processing of personal data in the context of a health crisis [EN] [FR]
Mali Personal Data Protection Authority (Autorité de Protection de Données à Caractère Personnel)
Covid-19 : les mises en garde de l’APDP sur la collecte de données personnelles et la protection de la vie privée des personnes [FR]
Mauritius Data Protection Office of Mauritius
Data Protection for Health Data and Artificial Intelligence Solutions in the context of the COVID-19 pandemic [EN]
Mexico

National Institute for Transparency, Access to Information and Personal Data Protection (INAI)
Datos Personales Seguros COVID-19 (Information Hub) [ES]
Statement – Ante casos de COVID-19, INAI emite recomendaciones para tratamiento de datos personales [ES]
Statement – Suspende INAI eventos públicos, por recomendación de la SSA para evitar contagio de COVID-19 [ES]
Statement – Adoptará INAI como medida de prevención el trabajo a distancia ante COVID-19 [ES]

Transparency, Public Information Access and Personal Data Protection Institute of Estado de México and Municipalities (Infoem)
Recomendaciones respecto a la garantía de los derechos de protección de datos personales y acceso a la información pública, ante brote de COVID-19 [ES]

Morocco National Commission for the control and the protection of Personal Data (Commission nationale de contrôle et de protection des données personnelles)
La CNDP à la disposition du gouvernement pour renforcer, en termes de respect de la vie privée, ses politiques proactives [FR]
Netherlands Data Protection Commission (Autoriteit Persoonsgegevens)
Statement – AP geeft organisaties meer tijd vanwege coronacrisis [NL]
FAQs on testing employees for Coronavirus (Corona op de werkvloer) [NL]
FAQs on working from home (Veilig thuiswerken tijdens corona) [NL]
New Zealand Office of the Privacy Commissioner
Privacy and Covid-19 [EN]
Organisation for Economic Co-operation and Development (Observer) OECD Covid-19 Hub [EN][FR][ES]
OECD policy brief: Tracking and tracing COVID: Protecting privacy and data while using apps and biometrics [EN]
OECD policy brief: Ensuring data privacy as we battle COVID-19 [EN]
OECD policy brief: Dealing with digital security risk during the coronavirus (COVID-19) crisis [EN]
Perú Autoridad Nacional de Protección de Datos Personales del Perú
Divulgar datos personales de pacientes con coronavirus puede ser multado hasta con 215 mil soles [ES]
Philippines National Privacy Commission
Collect what is necessary. Disclose only to the proper authority. [EN]
Protecting personal data in the time of COVID-19 [EN]
Collect the minimum necessary information in providing financial aid and other relief packages to those affected by the enhanced community quarantine [EN]
Statement on the release of passenger manifest of airlines to government agencies particularly the DOH, in relation to the 2019 nCov response [EN]
Statement on the Declaration of Public Health Emergency in Relation to COVID-19 [EN]
Statement on on “Social Vigilantism” in the time of COVID-19 [EN]
Guidance on patient privacy rights and disclosure of health status [EN]
Guidance on COVID-19-related apps, digital tools and solutions in this time of pandemic [EN]
Guidance to Sub-National Government Legislatures to Prevent COVID-related discrimination through the enactment of ordinances [EN]
Protecting Patient Data from Unauthorized Disclosure [EN]
Joint Statement of the Department of Health (DOH) and National Privacy Commission (NPC) on Processing and Disclosure of COVID-19 Related Data [EN]
Protecting Personal Data in a Work From Home Arrangement [EN]
Poland Personal Data Protection Office of Poland
Statement by the President of the Personal Data Protection Office on coronavirus [EN]
Security of personal data during remote learning [EN]
San Marino Autorità Garante per la protezione dei dati personali
Public announcement on COVID-19 emergency [EN] [IT]
Slovakia Office for Personal Data Protection of the Slovak Republic
Statement of the EDPB Chair on the processing of personal data in the context of the COVID-19 outbreak [SK]
Coronavirus and processing of personal data [SK]
Statement on Data Privacy Issues of Sick People and People in Quarantine and Data Requests from Municipalities [SK]
Joint Statement on the right to data protection in the context of the COVID-19 pandemic by Alessandra Pierucci, Chair of the Committee of Convention 108, and Jean-Philippe Walter, Data Protection Commissioner of the Council of Europe [SK]
Spain

Catalan Data Protection Authority
Statement regarding the processing of personal data related to the measures to deal with COVID-19 [CA][EN]

Spanish Data Protection Agency (Agencia Española de Protección de Datos)
Report from the State Legal Service Department (the Spanish DPA) on Processing Activities Relating to the Obligation for Controllers from Private Companies and Public Administrations to Report on Workers Suffering from Covid-19 [EN][ES]
Covid-19 FAQs [ES]
Statement – La AEPD publica un informe sobre los tratamientos de datos en relación con el COVID-19 [ES]
Statement – Comunicado de la AEPD en relación con webs y apps que ofrecen autoevaluaciones y consejos sobre el Coronavirus [ES]
Statement – Campañas de phishing sobre el COVID-19 [ES]

Switzerland Federal Data Protection and Information Commissioner (FDPIC)
Data protection legal framework for the containment of the coronavirus [EN][DE][FR][IT]
Tunisia Instance Nationale de Protection des Données Personnelles (INPDP)
Recommandations de L’instance Nationale de Protection des Données Personelles Relatif a la Protection des Données Personnelles en Periode de COVID-19 [FR]
Turkey Personal Data Protection Authority
Public Announcement on Distance Learning Platforms [EN][TR]
Public Announcement on Protection of Personal Data During the Fight Against COVID-19 [EN][TR]
Public Announcement Regarding Processing of Location Data and Tracking Mobility of Individuals to Combat Covid-19 [EN][TR]
United Arab Emirates Dubai International Financial Centre Commissioner of Data Protection (Observer)
Force Majeure Privacy: Insights into the Imperative for Data Protection Legislation (and FAQs) [EN]
United Kingdom Information Commissioner’s Office (ICO)
Information hub on data protection and coronavirus [EN]
Blog: Combatting COVID-19 through data: some considerations for privacy [EN]
Information Commissioner’s Opinion: Apple and Google joint initiative on COVID-19 contact tracing technology [EN]
Workplace testing – guidance for employers [EN]
Health, social care organisations and coronavirus – what you need to know [EN]
Data protection and working from home – what you need to know [EN]
Blog: Community groups and COVID-19: what you need to know about data protection [EN]
United Nations Special Rapporteurs COVID-19: States should not abuse emergency measures to suppress human rights – UN experts [EN]
United States of America Federal Trade Commission (FTC)
FTC, FDA Send Warning Letters to Seven Companies about Unsupported Claims that Products Can Treat or Prevent Coronavirus [EN]
Coronavirus Scams: What the FTC is Doing [EN]
COPPA Guidance for Ed Tech Companies and Schools during the Coronavirus [EN]
Remote learning and children’s privacy [EN]
Uruguay Regulatory and Control Unit of Personal Data (Unidad Reguladora y de Control de Datos Personales)
URCDP emitió dictamen sobre tratamiento de datos de salud en situaciones de emergencia [ES]
Recomendaciones para el tratamiento de datos personales ante la situación de emergencia sanitaria nacional [ES]